im working on a airgrapped network, and im trying to implement the panorama with cisco ise and i need the trustsec plugin. where is it at exactly?
Any CLI links or documentation to PAN-OS 11.1?Something like this> https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcLCASor is there a PDF/link that list PAN OS cli commands?Thanks.
Hi, Due to throughput limitation i need to change a cluster in VM300 to VM500. FW is currenting working. What would it be the procedure? minimum impact
Hi All, sorry to ask a trivial question, a supplier has sold just sold me the following SPF LX module. I seen that it says "LN#56 5/2019" In my eyes it means production Lot Number 56, production date 5/2019. My supplier says "This represents the first release date of this item "PAN-SFP-LX." And the manufacturing date of the product can be f...
First tech muted me every time I spoke and would not come back or answer for minutes at a time. Asked the same question for onver 45 minutes that he NEVER answered. Spoke to his manager, who got an escalation engineer. Escalation engineer gave me instructions that NEVER panned out and were incorrect. They didnt update case and there is no wa...
Question, I setup my PA-450 and ATT BGW320; however, I feel there is a loop as the connection sometimes drops or has slow connections on live connections like streaming TV and or live video. I guess my questions are as followed below. First, my setup is fiber going to the BGW320 that I could not get to change it to copper via ONT device as i...
We have 4 Palo Alto Clusters managed by panorama, each cluster has 2 firewalls, each firewall has number of Vsys. We want to configure user-ID with the Agent based method. My proposed solution is to integrate each Firewall directly with the User-ID agent then push User-ID agents in panorama (In device group setup it asks about default firewall...
Is there a way to exclude traffic on port 8080 from the VPN tunnel while connected to Global Protect? I want to establish direct communication exclusively over port 8080, separate from VPN traffic. Is it possible? If so, please tell me how to set it up.
We are migrating onpremise AD to AZUREAD. The doubt is that these users going to AzureAD and all the info (source name and group belong) can not be retrieved by the FW (as UIA did on premise mode). So how can get the info (users/groups) from AzureAD to configure policy source groups in Palo Alto? We doesnt have any SAML IdP configured in Palo Alto.
I'm looking at an old version 7 PA3000 which uses a user-id agent to map users (active directory) to IP addresses.When i log onto the firewall CLI a "show user ip-user-mapping-mp all" command returns what looks to be a valid list of user mappings. However 90% of the traffic log entries have 'source user' blank. There doesnt seem to be a reaso...
Good day all, I wasn't sure which group to post this on exactly so I figure try general topics first and then perhaps the conversation will lead me to the correct place where I can get more insight on this. What I am trying to do is I wanted to see if there is a better want to provide remote users access. Right now I am using VPN tunnels/GRE t...
Recently started receiving reports from students that they cannot download new games or updates for their installed apps on Playstation and are greeted with the error code mentioned in the subject. I have a case open with support, but I wanted to reach out to the community as well to see if any other University admins have dealt with the issue i...
Hello, I know this topic has been covered in a fair number of posts. Since I haven't read of anyone discussing this, I'm skeptical that it's an option. ....but I'm still going to post about it and ask directly. I have my non_syn tcp counter incrementing pretty much all of the time. I'd like to know if there is a way to setup a packet capture f...
Dears, I have created one custom response page(including image) that is for application block and URL block.example:- If someone wants to access a restricted URL or application the page should be displayed on the customer screen. I can see, once I apply the custom response page in the URL block page and application block page. then access the HT...
Kindly your help to get the direct link to download last version for Expedition migration tool as OVA. I tried to find it in the community but did not find a new version.
reaper
on:
Server monitering -Connection refused
PavelK
on:
Commit Failed
MP18
on:
SSL Decryption Issue on PA-520 Running PAN-OS 12.1.7-h3
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
